This privacy notice applies only to the Q-Global and Q-Interactive platforms (the 'Pearson Platforms'). It contains information about how Pearson Education Limited (‘Pearson’) collects, uses and protects personal data it receives from customers and test administrators and how it processes personal data which is generated by assessments carried out on the Pearson Platforms. Whether Pearson is a data controller in relation to your personal data (the person who decides how personal data is processed and used) or a data processor (which carries out processing on behalf of and in accordance with the instructions of a data controller) depends on whether you are a Pearson customer and/or test administrator or an individual who participates in a test or assessment administered by a test administrator.

I am a customer and/or a test administrator.

Pearson is the Data Controller

Pearson Education Limited is the data controller in relation to your personal data. It is registered at Companies House under company number 00872828 and its registered office is 80 Strand, London WC2R 0RL You can contact Pearson in relation to this privacy statement or our handling of your personal data at the following address;

What information does Pearson collect about me?

Account informationWe collect some or all of the following personal information from customers and/or test administrators directly when we set up your account; name, telephone number, mobile number, e-mail address, “Pearson Qualification Level”, login ID and password. Our legal basis for the collection and processing of this data is the provision to you of services purchased by you or on your behalf on the Pearson Platforms. We need this information in order to provide the services under our agreement with you and if you do not provide this information then we may not be able to provide you with the services.

Browser InformationWe also automatically collect information transmitted by your browser when you access the Platforms and relevant products. This includes your IP address, the date and time of the request, the pages accessed, the access status/ HTTP status code, the data volume transmitted at any one time, the website from which the request has come, your browser, your operating system and interface, as well as the language and version of the browser software. The legal basis for collecting and processing this personal data is to be able to operate the Pearson Platforms and provide you with access to the products and services you are entitled to access.

CookiesWe use cookies (small text files which are transferred to your browser by the Pearson Platforms) to identify data traffic patterns, personalise contents and support security. The cookies we use are described in more detail in our cookie statement below. They do not provide any information which might disclose the identity of a specific person but they may potentially identify your computer, your browser and your internet settings. You may change the storing of cookies in your browser settings at any time by selecting the function “accept no cookies”. However, disabling essential cookies may result in you no longer be able to use the entire functionality of the Pearson Platforms.

Google AnalyticsGoogle Analytics, a web analytics service provided by Google, Inc. (“Google”) also places cookies on your computer, to enable Google to provide us with activity reports relating to the Pearson Platforms. Google uses this data only to provide us with information on how users use the Pearson Platforms and does not associate your IP address with any other data held by Google. The information generated by Google cookies about your use of the platform (including your IP address) will be transmitted to and stored by Google on servers in the United States. You may refuse these cookies by selecting the appropriate settings on your browser or by downloading and installing the browser plug-in available under https://tools.google.com/dlpage/gaoptout?hl=en-GB.

What will Pearson do with my personal information?We use your account information for the purpose of setting up and administering your Q-global or Q-interactive account so that you can purchase, access and use products and services available on the Pearson Platforms, to verify your entitlement to use products and services that have been purchased by you or for your use and to provide you with support and customer services.

Pearson may also use your contact information for its own legitimate purposes of informing you about other Pearson services which may interest you. You may at any time elect not to receive further marketing information by following the ‘unsubscribe’ link at the foot of an email from Pearson or by emailing Pearson at the following address: marketing@pearsonclinical.co.uk.

How long does Pearson keep my personal information for?Pearson will retain personal data collected directly from a customer or test administrator while the account remains active and for such period after that as is necessary to enable you to download data and carry out such activities as are necessary for us for you to close your account. We will then retain such limited amount of information relating to your account as is required for audit purposes.

How does Pearson keep my personal information safe?Pearson and its affiliate companies host the personal information provided by you and the reports delivered to the test administrator on secure servers operated by Pearson group companies or by contractors appointed to operate and administer the Pearson Platforms. Pearson takes appropriate operational and security measures necessary to keep the information secure and requires similar operational and security measures from its contractors. Further details about Pearson’s security measures are available on the Q-Global and Q-interactive websites.

Will Pearson share my personal information with anyone else?Pearson will not sell your information. Pearson will not share your information with any third party except as is required to operate the Pearson Platforms and administer your account. This requires us to share your information with our affiliate companies and contractors involved in the operation and administration of the Pearson Platforms.

Will Pearson send my personal information outside of Europe?Account information is administered outside the EEA by NCS Pearson Inc. Pearson’s affiliate company in the USA. Pearson has entered into an intra-group agreement with its affiliates outside the EEA on terms equivalent to those contained in the ‘model clause’ agreements approved by the European Commission which provide safeguards for individuals whose personal data is transferred outside the EEA. The Pearson Platform and the personal data it processes is hosted by Amazon Web Services in Canada where the law relating to the processing of personal data is regarded by the European Commission as adequate to protect the rights and freedoms of individuals located in the European Union. Such personal data is transferred to Canada under an adequacy decision of the European Commission with regard to transfers of data outside of the European Union, and such transfers will also be conducted in accordance with applicable local law.

What rights do I have in respect of my personal information?You have the right to update and correct the personal information on your account. You also have the right to request from Pearson all personal information that we hold that relates to you, to request restriction of the processing of that data and to request that we delete that data. Where allowed by applicable law there may be an administrative charge for supply of copies of data. You also have the right to object to our continued processing of your personal data. You may also have the right to data portability. If you have a complaint about the way in which Pearson uses your personal information you have the right to complain to your relevant local Data / Information Regulator.

I am participating in a test or assessment carried out by a test administrator.

The test administrator is the Data Controller

The data controller (the person who decides how personal data is processed and used) is the person who carries out the test or assessment on the Pearson Platforms.

What information will Pearson receive about me?When you participate in a test or assessment on the Pearson Platforms we will process on behalf of the test administrator some or all of the following personal information; unique identifier, date of birth, gender, left or right-handedness and native language. Depending on the nature of the assessment being performed we may receive further information including but not limited to: medical history; professional training and information on issues linked therewith; employment, professional career and information on issues linked therewith; health problems; medication used; employment status; marital status; family information and family history.

How will Pearson receive my personal information?Depending on the nature of the test or assessment this information is provided by you to the test administrator who enters it into the Pearson Platforms, or is entered directly into the Pearson Platforms during the assessment either by you or by the test administrator.

What will Pearson do with my personal information?The processing Pearson carries out on the information provided by you during a test or assessment is to evaluate the answers to questions asked in the course of the test or assessment and to derive raw scores and test-specific scaled or percentile scores within the Pearson Platforms. We then return this information to the test administrator in the form of reports and/or structured data containing scores, indexes etc. which are produced by the Pearson Platforms. We do this processing solely on behalf of and on the instructions of our customer who has administered the test or assessment.

We may occasionally compile answers provided to us and other information collected in the course of test implementations into an aggregated form which does not identify any individual. This aggregated data may be made available to researchers, test developers and our contractors for the purposes of research, quality control, operational management, security and sales promotion, as well as to improve, develop and expand our products and services.

How long does Pearson keep my personal information for?Pearson retains the information you provide for so long as the test administrator retains an account on the Pearson Platforms. Pearson will delete all personally identifying information on closure of this account.

How does Pearson keep my personal information safe?Pearson and its affiliate companies host the personal information provided by you and the derived scores and reports delivered to the test administrator on secure servers operated by Pearson group companies or by contractors appointed to operate and administer the Pearson Platforms. Pearson takes appropriate operational and security measures necessary to keep the information secure and requires similar operational and security measures from its contractors. Further details about Pearson’s security measures are available on the Q-Global and Q-Interactive websites.

Will Pearson share my personal information with anyone else?Pearson will not sell your information. Pearson will not share your information with any third party except with the Pearson customer who has administered the test or on their instructions and with Pearson’s affiliates and contractors involved in hosting and operating the Pearson Platforms.

Will Pearson send my personal information outside of Europe?The Pearson Platforms and the personal data processed on the Pearson Platforms is hosted by Amazon Web Services in Canada where the law relating to the processing of personal data is regarded by the European Commission as adequate to protect the rights and freedoms of individuals located in the European Union.

What rights do I have in respect of my personal information?You have the right to update and correct your personal information, to request all personal information that the test administrator holds that relates to you, to request restriction of the processing of that data, and to request that they delete that data. You may also have the right to data portability of that data. There may be an administrative charge for supply of copies of data where permitted by applicable law. These requests must be made to the Pearson customer or test administrator who administered the test on the Pearson Platforms. You also have the right to object to continued processing of your personal data by the Pearson customer or test administrator. If you have a complaint about the way in which Pearson uses your personal information you have the right to complain to your relevant local Data / Information Regulator.

Q-global and Q-interactive - Cookie statement

The following cookie categories are based on the classification presented in the International Chambers of Commerce (ICC) Cookie Guide.

Category 1: Strictly necessary cookies. These cookies are essential to allow us to provide services that you have requested.

Category 1 cookies used by the Pearson Platforms:

Platform

Cookie name

Expires at

Use

Q-interactive

jsessionID

30 minutes if idle

Used to track user session that is generated on the server when a user logs in

Q-interactive

ticketId

30 minutes

Used to track a forgot username/password worflow.

Q-interactive

_2fa_exp_<user_id>

12 hours

Used in Q-interactive Central to store the information that 2FA had been used and allows the user to bypass the 2nd factor for 12 hours on that device.

Q-interactive

_2fa_rme_<user_id>

12 hours or 30 days if remember my device

Used in Q-interactive Assess to store the information that 2FA had been used and allows the user to bypass the 2nd factor for 12 hours on that device, or 30 days if remember my device was selected.

Q-global

JSESSIONID

Session

Identifies the users session on the server.

Q-global

BIGipServerDIAL-4Online_PearsonClinical.com

Session

Used to manage sessions on our load balanced servers, to ensure user requests are routed consistently to the correct server.

Q-global

mfa-XXXX

12 hours

Used in Q-global to store the information that 2FA had been used and allows the user to bypass the 2nd factor for 12 hours on that device.

Category 2: Performance cookies. These cookies collect information about how users use the Pearson Platforms, for instance which pages users go to most often. The information collected by these cookies is aggregated, so these cookies don’t collect information that identifies individual users. The information collected is anonymous and is only used to improve the way Pearson Platforms work.

Category 2 cookies used by the Pearson Platforms:

Platform

Cookie name

Expires at

Use

Q-global and Q-interactive

__utma

2 years from set/update

A Google Analytics cookie used to distinguish users and sessions. The cookie is updated every time data is sent to Google Analytics.

Q-global and Q-interactive

__utmb

30 minutes from set/update

A Google Analytics cookie used to determine new sessions/visits. The cookie is updated every time data is sent to Google Analytics.

Q-global and Q-interactive

__utmc

Session

A Google Analytics cookie used to determine whether the user is in a new session/visit.

Q-global and Q-interactive

__utmt

10 minutes

A Google Analytics cookie used to throttle request rate.

Q-global and Q-interactive

__utmz

6 months from set/update

A Google Analytics cookie used to store the traffic source or campaign that explains how the user reached the site. The cookie is updated every time data is sent to Google Analytics.

Category 3: Functionality cookies. These cookies allow us to remember choices you make (such as your user name, language or the region you are in) and provide enhanced, more relevant features.

Category 3 cookies used by the Pearson Platforms:

Platform

Cookie name

Expires at

Use

Q-global

country-language

1 year

Used to identify the country-language setting of the user.

Q-global

remember

1 year

Used to remember the country-language setting of the user.

Category 4: Targeting or advertising cookies. These cookies are used to deliver adverts that are more relevant to you and your interests. They are also used to limit the number of times you see an advert as well as help measure the effectiveness of the advertising campaign. They are usually placed by advertising networks with the website operator’s permission. They remember that you have visited a website and this information is shared with other organisations such as advertisers.